// Legal

Privacy Policy

Last updated: March 31, 2026

The Short Version

PDF Bunker processes all files entirely in your browser. Your documents never leave your device. We do not upload, store, transmit, or access your files in any way. We do collect some non-file data to operate the service, which is detailed below.

How File Processing Works

All PDF operations (merge, split, compress, convert, rotate, OCR, signing, etc.) run locally in your browser using JavaScript libraries. Files are loaded into your browser's memory, processed, and the result is downloaded directly to your device. No file data is sent over the network during processing. You can verify this by checking your browser's Network tab in Developer Tools.

Data We Collect

We collect the following data to operate the service:

Account data: If you create an account, we store your email address and authentication credentials via Supabase Auth. This is required to manage your subscription.
Subscription data: If you subscribe to PDF Bunker Pro, we store your subscription status and a customer identifier from our payment processor (Lemon Squeezy). We do not store credit card numbers or payment details — those are handled entirely by Lemon Squeezy.
Usage counts: We track the number of operations performed per day to enforce free tier limits. For logged-in users, this is tied to your account. For anonymous users, we use your IP address to track daily usage. IP addresses are stored solely for rate limiting and are not used for any other purpose.
Analytics: We use Vercel Analytics to collect anonymous page view data (pages visited, referrer, country). This helps us understand which tools are popular and improve the service. Vercel Analytics does not use cookies and does not track individual users across sessions.

Data We Do Not Collect

Your files or documents — these never leave your browser
File names, contents, or metadata from your documents
Third-party tracking pixels or advertising cookies
Keystroke data, screen recordings, or session replays

Payment Processing

Payments are processed by Lemon Squeezy, which acts as our merchant of record. Lemon Squeezy handles all billing, VAT collection, refunds, and payment security. We never see or store your credit card information. For Lemon Squeezy's privacy practices, please refer to their privacy policy at lemonsqueezy.com.

Cookies

We use only essential cookies required for authentication (maintaining your login session). We do not use cookies for advertising or cross-site tracking. Vercel Analytics operates without cookies.

Data Deletion

Since your files are never stored on our servers, there is nothing to delete. If you wish to delete your account and associated data (email, subscription info, usage records), please contact us and we will remove your data within 30 days.